VBA/TrojanDownloader.Agent.ZS [Threat Name] go to Threat
VBA/TrojanDownloader.Agent.ZS [Threat Variant Name]
| Category | trojan |
| Detection created | Aug 11, 2015 |
| Detection database version | 12077 |
| Aliases | Trojan-Downloader.PDF.Agent.aw (Kaspersky) |
| W97M.DownLoader.552 (Dr.Web) | |
| TrojanDownloader:O97M/Donoff (Microsoft) |
Short description
VBA/TrojanDownloader.Agent.ZS is a trojan which tries to download other malware from the Internet.
Installation
The trojan does not create any copies of itself.
Other information
The trojan contains a URL address.
It tries to download a file from the address.
The file is stored in the following location:
- %temp%\ceece.exe
The file is then executed. The HTTP protocol is used.
Trojan requires the Microsoft Word to run.